← CVE Intelligence

CVE-2020-6649

Fortinet / Fortinet FortiIsolator PUBLISHED

Description (CNA)

An insufficient session expiration vulnerability in FortiNet's FortiIsolator version 2.0.1 and below may allow an attacker to reuse the unexpired admin user session IDs to gain admin privileges, should the attacker be able to obtain that session ID (via other, hypothetical attacks)

Affected (CNA)

Vendor / productVersions
Fortinet / Fortinet FortiIsolatoraffected FortiIsolator 2.0.1

CWE

No CWE identifiers supplied.

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.